2024-10-18_0e9d693d7f376064745ad53a9536f1e7_cryptolocker | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2024-10-18_0e9d693d7f376064745ad53a9536f1e7_cryptolocker
Size

61KB
MD5

0e9d693d7f376064745ad53a9536f1e7
SHA1

6f6c01469594eed5217627ea83e44de1f54c9f9f
SHA256

f23236ef5b0de1c64b89e8f81e3b82b00be722ee55abea0b20a8b80a65adc18a
SHA512

69d856cec5ebcf70dce7ad3751b491e34d04dc39aa31ffd412dfe0b3df8a971e0d5b343ce5d43e5e6b49711153fba0104bbcb6488bc4ec1df5f62df6cf5ffdfd
SSDEEP

1536:o1KhxqwtdgI2MyzNORQtOflIwoHNV2XBFV72BOlA7ZszudnYTjipvF29j:aq7tdgI2MyzNORQtOflIwoHNV2XBFV7x

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2024-10-18_0e9d693d7f376064745ad53a9536f1e7_cryptolocker

Files

2024-10-18_0e9d693d7f376064745ad53a9536f1e7_cryptolocker
.exe windows:5 windows x86 arch:x86

db206e36db5c9492ce02c61a679129e2

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

BeginPaint
DispatchMessageA
DrawTextA
EndPaint
TranslateMessage
GetMessageA
PostQuitMessage
ShowWindow
UpdateWindow
MoveWindow
CreateWindowExA
RegisterClassExA
DefWindowProcA
MessageBoxA
SendMessageA
LoadIconA
DestroyWindow
LoadCursorA
GetClientRect
GetWindowRect

kernel32

GetLastError
lstrcpyA
GetModuleHandleA
GetCommandLineA
DeleteFileA
CloseHandle
CreateFileA

gdi32

DeleteObject
CreateFontIndirectA

Sections

.text
Size: 9KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 11KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ